Static task
static1
Behavioral task
behavioral1
Sample
2f8f97ad74411b3a8919a4a481f1d32521fcb49ea5e54008676e61549e6b0208.exe
Resource
win7-20220414-en
General
-
Target
2f8f97ad74411b3a8919a4a481f1d32521fcb49ea5e54008676e61549e6b0208
-
Size
660KB
-
MD5
d5a823889ad46e52f2d68e4004cf3227
-
SHA1
e94097a784f100aedb1aa459bedb8b96221554c2
-
SHA256
2f8f97ad74411b3a8919a4a481f1d32521fcb49ea5e54008676e61549e6b0208
-
SHA512
243aed2edcf26717ba0178ed2cae73a493e7826aa98c5c999b364ff5d55467b9a0c4dc408847074316f4c5e35ef8e76e124278a61f50b6fddcc8658bbf1cd3dd
-
SSDEEP
12288:xav7OkupC33lFyaBezl71vNhb9cPXlRNUsZLWxR+m3Nq6f:xUmuOl1VhWPXj5C+6f
Malware Config
Signatures
Files
-
2f8f97ad74411b3a8919a4a481f1d32521fcb49ea5e54008676e61549e6b0208.exe windows x86
730af41f388bec6693e9246677c64cf9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommTimeouts
GetSystemTimes
GetNativeSystemInfo
IsProcessorFeaturePresent
GetTimeZoneInformation
GetSystemTimeAdjustment
PeekNamedPipe
lstrcmpW
lstrcatA
lstrlenW
_lopen
CreateSemaphoreW
OpenFileMappingA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExA
GetCommandLineW
ExpandEnvironmentStringsW
SetFirmwareEnvironmentVariableW
FindResourceW
EnumResourceLanguagesW
FindAtomA
GetDriveTypeA
GetTempPathW
GetTempFileNameW
FindFirstFileExA
CopyFileA
ClearCommError
CreateHardLinkW
GetVolumeInformationW
IsBadCodePtr
CommConfigDialogA
SetDefaultCommConfigA
OpenJobObjectA
FindNextVolumeMountPointA
FindVolumeMountPointClose
SetVolumeMountPointA
DeleteVolumeMountPointA
CreateActCtxW
ActivateActCtx
FindActCtxSectionGuid
GetNumaHighestNodeNumber
CompareStringW
SetCalendarInfoA
EnumDateFormatsA
IsValidLocale
GetSystemDefaultLangID
GetConsoleCursorInfo
WriteConsoleW
SetConsoleOutputCP
GetConsoleAliasW
CreateFileW
FlushFileBuffers
SetStdHandle
UnlockFile
ReleaseSemaphore
LeaveCriticalSection
DebugActiveProcessStop
ResumeThread
InterlockedIncrement
SetErrorMode
SwitchToThread
GetProcessWorkingSetSize
HeapUnlock
HeapCompact
LocalAlloc
GlobalFree
GlobalAlloc
GetProcAddress
MoveFileExW
EncodePointer
DecodePointer
RaiseException
RtlUnwind
GetLastError
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
HeapSize
IsDebuggerPresent
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
GetCurrentThreadId
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
LCMapStringW
EnterCriticalSection
LoadLibraryExW
HeapReAlloc
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
OutputDebugStringW
CloseHandle
user32
CreateIcon
GetMonitorInfoA
advapi32
PrivilegedServiceAuditAlarmW
SetServiceObjectSecurity
QueryServiceLockStatusA
NotifyBootConfigStatus
RegSetValueExA
RegQueryValueExA
GetCurrentHwProfileW
ConvertToAutoInheritPrivateObjectSecurity
FindFirstFreeAce
AddAccessAllowedAce
ObjectCloseAuditAlarmA
AccessCheckByTypeAndAuditAlarmW
AccessCheckByTypeAndAuditAlarmA
AccessCheckAndAuditAlarmA
ReportEventW
Sections
.text Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 539KB - Virtual size: 539KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 11.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wozu Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.joci Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ